Chef Sinatra

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-1003087 Maven MEDIUM This Month

A missing permission check in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jenkins Chef Sinatra

NVD

CVSS 3.1

6.5

EPSS

1.5%

CVE-2019-1003086 Maven MEDIUM This Month

A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Jenkins CSRF Chef Sinatra

NVD

CVSS 3.0

6.5

EPSS

1.3%

CVE-2019-1003087 Maven

EPSS 2% CVSS 6.5

MEDIUM This Month

Authentication Bypass Jenkins Chef Sinatra

NVD

CVE-2019-1003086 Maven

EPSS 1% CVSS 6.5

MEDIUM This Month

Jenkins CSRF Chef Sinatra

NVD